Embedded Devices Security SME

Tata Elxsi; Chennai, Bengaluru; Vor Ort; INR 4.000.000 - 6.000.000; Vollzeit

Zusammenfassung

Tata Elxsi, Inc. is seeking an experienced Embedded Devices Security SME to lead design, assessment, and implementation of cybersecurity controls across embedded platforms in automotive, medical, and connected TV/OTT ecosystems.

You will collaborate with cross-functional teams to ensure end-to-end device security across software and hardware lifecycles, including secure boot, OTA updates, threat modeling, and compliance with MISRA/CERT guidelines.

Qualifikationen

• Bachelor's/Master's in CS, Electronics, or Embedded Systems.
• CISSP, CEH, Automotive SPICE, ISO 21434 Practitioner or equivalent preferred.
• Embedded Linux/RTOS internals and kernel security needed.
• Familiarity with cryptography, PKI and key provisioning.

Aufgaben

• Conduct security architecture reviews and threat modeling for embedded device platforms (RTOS, Linux, Android, QNX).
• Perform vulnerability assessments, firmware analysis, and penetration testing for automotive ECUs and IoT devices.
• Guide secure boot, firmware encryption, key management, and secure update (OTA) mechanisms.
• Integrate and evaluate hardware security modules and trusted execution environments.

Kenntnisse

Embedded Linux/RTOS internals

Bootloaders and kernel security

Threat modeling

Fuzz testing/reverse engineering

Cryptography PKI

Security architecture reviews

SAST/DAST

CAN-FD automotive protocols

MISRA CERT guidelines

Mentoring teams

Ausbildung

Bachelor's/Master's in CS/Electronics/Embedded Systems

Certifications: CISSP, CEH, Automotive SPICE, ISO 21434 Practitioner

Tools

IDA Pro

Ghidra

Binary Ninja

Wireshark

Firmware analysis tools

JTAG/UART debugging

Jobbeschreibung

Tata Elxsi offers comprehensive services in Media and Communications, including research, strategy, design, software development, validation, and deployment. With global presence and deep expertise, we specialize in 5G services, Edge computing, and connectivity solutions.

We are looking for an experienced Embedded Devices Security SME to lead the design, assessment, and implementation of cybersecurity controls across embedded platforms in automotive systems, medical devices, and connected TV/OTT ecosystems. The ideal candidate will collaborate with cross-functional teams to ensure end-to-end device security across software and hardware lifecycles.

Key Responsibilities:

• Conduct security architecture reviews and threat modeling for embedded device platforms (RTOS, Linux, Android, QNX).


• Perform vulnerability assessments, firmware analysis, and penetration testing for automotive ECUs, medical IoT devices, and OTT devices.


• Guide to implementation of secure boot, firmware encryption, key management, and secure update (OTA) mechanisms.


• Integrate and evaluate hardware security modules (HSM, TPM, SE) and trusted execution environments (TEE).


• Define and enforce secure coding practices (C/C++/Python) as per MISRA and CERT guidelines.


• Lead compliance activities aligned with ISO 21434, FDA Cybersecurity Guidance, and OWASP IoT standards.


• Conduct SAST, DAST, and SCA for embedded code and third-party software, managing vulnerabilities throughout the product lifecycle.


• Support cybersecurity documentation, SBOM generation, and vulnerability disclosure processes.


• Analyze risks in connected interfaces (CAN, BLE, Wi-Fi, Ethernet, USB, HDMI, etc.) and define mitigations.


• Mentor engineers and drive secure design practices across product teams.

Required Skills & Competencies:

• Strong understanding of embedded Linux/RTOS internals, bootloaders, and kernel-level security.


• Hands-on experience with IDA Pro, Ghidra, Binary Ninja, Wireshark, and firmware extraction tools (JTAG, UART).


• Knowledge of cryptography, PKI, and key provisioning.


• Familiarity with secure communication protocols (TLS, DTLS, MQTT, CAN-FD).


• Experience in fuzz testing, binary analysis, and reverse engineering.


• Proficient in threat modeling (STRIDE, Attack Tree, STPA-Sec).


• Understanding automotive diagnostics (UDS, OBD-II) and medical communication protocols.


• Exposure to SBOM and vulnerability management tools.


• Excellent communication and documentation skills.

Education:

• Bachelor's or Master's in Computer Science, Electronics, or Embedded Systems.


• Preferred Certifications: CISSP, CEH, Automotive SPICE, ISO 21434 Practitioner, or equivalent.